Microsoft Blames Add-Ons For Browser Woes

darthcamaro writes "Running IE and been hacked? Don't blame Microsoft — at least that's what their security types are now arguing. 'One of the things we've seen in the last two years is that attackers aren't even going after the browser itself anymore,' Eric Lawrence, Security Program Manager on Microsoft's Internet Explorer team, said. 'The browser is becoming a harder target and there are many more browsers. So attackers are targeting add-ons.' This kinda makes sense since whether you're running IE, Firefox, Safari or Chrome you could still be at risk if there is a vulnerability in Flash, PDF, QuickTime or another popular add-on. Or does it?"

Comments

I think they have a point..

[Anonymous Coward]

With the likes of ActiveX, and Silverlight out there, who could blame IE?

Re:I'll still blame you for everything else.

[gmack]

That would be an add-on problem.

This is too fun

[Anonymous Coward]

I like the sex analogies; I think this should be a new standard for /.

Yours has some good points but:

Surfing the web with IE is like if you were to go to a convenience store to buy eggs and discovered that you had to have sex with the mysterious man behind the counter in order to accomplish this task.

Sure, you can be safe about it: wear condoms, only go to reputable convenience stores with clean-looking men behind the counter, etc. But isn't part of you wondering why you have to open yourself up in this way?

Re:This is too fun

[Bargeld]

>>I like the sex analogies; I think this should be a new standard for /.

Nonstarter. Reader-base is unfamiliar with the interface.

Back to car analogies please.

--Bargeld

He's right you know ...

[Luscious868]

'One of the things we've seen in the last two years is that attackers aren't even going after the browser itself anymore,' Eric Lawrence, Security Program Manager on Microsoft's Internet Explorer team, said.

And if you believe that I've got this great piece of land I'd like to sell you.

Re:I'll still blame you for everything else.

[Anders]

(Yes, I know I am going to get voted down for attempting to defend IE in any capacity...they should really just add -1 Disagree and be done with it)

Much more needed is "-1, Reverse psychology"

(runner-up is "+1, your uid is prime")

ActiveXploit

[VGPowerlord]

Wait, did Microsoft just admit that ActiveX is one of the largest security holes ever?

Re:I've always said this.

[uniquename72]

In fairness to gp, looking at someone through a telescope isn't entirely risk-less, either. They could, for example, shine a laser back at you and destroy your retina. Or pull a goatse, resulting in same.

Re:I'll still blame you for everything else.

[TrebleMaker]

definately

Definitely. Definitely!

People are going to write they way the write
irregardless of your protests.
You should of just, like, totally ignored him.